Privacy Policy
What personal data we collect, why, where it's kept, who helps us process it and how long we keep it.
Who this covers
This policy covers the Siftyr website at siftyr.si and the Siftyr app at app.siftyr.si, including its API. "Siftyr", "we" and "us" mean the company that provides the service. For questions about this policy, email support@siftyr.si.
Siftyr collects public web data on behalf of our customers. For that data, our customer decides what is collected and why, and we process it on their instructions. If you believe data about you was collected through Siftyr, contact the customer that collected it, or write to us and we'll pass your request on.
What we collect
When you use the app
- Account details: your name, work email, organization, role, and a hashed password (or your single sign-on identity if your organization uses SSO).
- Activity: sign-ins, configuration changes, harvests, exports and deliveries, recorded in your organization's activity log.
- What you give us: collection and source settings, messages and attachments in discussions, and credentials for your delivery destinations. Destination credentials and SSO secrets are encrypted with AES-256-GCM before they're stored.
- AI usage: for each AI feature you use, the task, model, token counts, time taken and cost, so we can run and bill the service.
When you visit siftyr.si
The website sets no cookies and runs no analytics. Its fonts load from Google Fonts, so Google receives your IP address and browser details when you visit.
When you email us
Mail to support@siftyr.si or sales@siftyr.si is received by our email provider, kept for up to 30 days in storage we control, and forwarded to the team member who handles it.
Cookies
The app uses only cookies it needs to work: your sign-in session, short-lived cookies during single sign-on, your light or dark theme, and, for Siftyr staff, which organization they're viewing. We don't use advertising or analytics cookies.
How we use it
- To provide the service: run your harvests, check and deliver your data, and show your organization's history.
- To keep accounts and the service secure, for example locking an account after repeated failed sign-ins.
- To send email the service needs: sign-in links, invitations, delivery notices and alerts.
- To support you and answer your messages.
- To measure usage for billing.
We don't sell personal data, and we don't use it for advertising.
AI features
Some features use AI models from third-party providers: Agentic Extract and Crawl, auto-detect in the visual builder, and suggested checks and transforms. When you use one, we send the provider only what the feature needs: the page content, the fields you asked for, or a sample of your data. AI features are optional; harvests built by our team don't send your data to an AI provider.
Where your data is stored
The app, its database and stored files run on Amazon Web Services in the Sydney, Australia region. The website is served by Vercel's global network. Some of the providers below process data in other countries, including the United States.
Who processes it for us
| Provider | What for | Where |
|---|---|---|
| Amazon Web Services | App hosting, database, file storage, backups, and sending and receiving email | Australia (Sydney) |
| Vercel | Hosting the siftyr.si website and its DNS | Global network |
| Groq | AI features: page content, field names and data samples you send to them | United States |
| Google Fonts | Fonts on the siftyr.si website (sees visitors' IP addresses) | Global network |
We'll update this list, and tell customers before a new provider starts processing customer data.
How long we keep it
- Harvested data, exports and crawl logs: 90 days by default. Each organization can set its own period, from 7 days to 10 years. Older data is deleted automatically.
- Account and activity data: while your organization's account is open. When an account closes, we delete its data on request.
- Backups: nightly database backups are kept for 7 days and weekly disk snapshots for 4 weeks, so deleted data is fully gone from backups within about 5 weeks.
- Emails to support and sales: 30 days in our storage, plus the forwarded copy in our team's inbox.
How we protect it
All traffic is encrypted in transit, stored credentials are encrypted at rest, API keys are hashed, and access inside each organization is controlled by role. Details are on our Security page.
Your rights
You can ask to see, correct, export or delete the personal data we hold about you, or object to how we use it. Email support@siftyr.si from the address on your account and we'll respond within 30 days. If your organization manages your account, some requests may need to go through its administrator. You can also complain to your local data protection authority.
Children
Siftyr is a business service and isn't meant for anyone under 16.
Changes
We'll post changes here and update the date at the top. If a change materially affects how we use your data, we'll tell account owners by email before it takes effect.